Do we want to do any crazy stuff like overwriting the password in memory before freeing the memory to ensure that the password data is cleared off the heap before freeing it? I know there are issues with making sure that actually gets executed correctly, but it might be a nice thing to add... /cc @vmg